14bb4cc19f54125343362c83b0629510ddbb742613ce0de8930d0cbb22807c58 | Triage

Sharing

General

Target

ea7f320f11e1562b26212d0c7bac758f_JaffaCakes118
Size

464KB
Sample

240919-dytklsycla
MD5

ea7f320f11e1562b26212d0c7bac758f
SHA1

08b64b3d6190dea65eada4d1d636847c9dd2223b
SHA256

14bb4cc19f54125343362c83b0629510ddbb742613ce0de8930d0cbb22807c58
SHA512

7944c5b1c1974dc65693fbba7cc40f41b01865acffb04da4ca5bf4d06f6ff94f647dbb04d101ac570d46712aa6063d4b8f3d7d0b70db11b59a6bad9945909e77
SSDEEP

3072:SGrl7nMxlBos93IBxtwf3am0SDqtgaQURT:RSKhQU

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  
  ea7f320f11e1562b26212d0c7bac758f_JaffaCakes118
- Size
  
  464KB
- MD5
  
  ea7f320f11e1562b26212d0c7bac758f
- SHA1
  
  08b64b3d6190dea65eada4d1d636847c9dd2223b
- SHA256
  
  14bb4cc19f54125343362c83b0629510ddbb742613ce0de8930d0cbb22807c58
- SHA512
  
  7944c5b1c1974dc65693fbba7cc40f41b01865acffb04da4ca5bf4d06f6ff94f647dbb04d101ac570d46712aa6063d4b8f3d7d0b70db11b59a6bad9945909e77
- SSDEEP
  
  3072:SGrl7nMxlBos93IBxtwf3am0SDqtgaQURT:RSKhQU
Score

7^/10

defense_evasion discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery